PT-2006-3463 · Xoops · Xoops

Rgod · Publicado 2006-05-22 · Atualizado 2018-10-18 · CVE-2006-2516

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions XOOPS versions 2.0.13.2 and earlier

Description The issue allows remote attackers to conduct directory traversal attacks or include PHP files. This can be achieved by overwriting variables such as $xoopsOption['nocommon'] when register globals is enabled. Attackers can exploit this via xoopsConfig[language] to misc.php or xoopsConfig[theme set] to index.php by injecting PHP sequences into a log file.

Recommendations For XOOPS versions 2.0.13.2 and earlier, consider disabling the register globals setting to prevent variable overwrite attacks. As a temporary workaround, restrict access to misc.php and index.php to minimize the risk of exploitation. Avoid using the xoopsConfig[language] and xoopsConfig[theme set] variables in sensitive operations until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2006-2516

Produtos afetados

Xoops

Referências · 9

• 🔥 https://exploit-db.com/exploits/1811 · Exploit
• 🔥 http://secunia.com/advisories/20176 · Exploit
• 🔥 http://securityfocus.com/bid/18061 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2516 · Nota de Segurança
• http://securityreason.com/securityalert/934 · Nota
• http://osvdb.org/25683 · Nota
• http://vupen.com/english/advisories/2006/1895 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2516 · Nota
• http://securityfocus.com/archive/1/434698/100/0/threaded · Nota